3 ms·
I think every OS should ask you to press a freshly generated sequence of keys when connecting a keyboard to prevent BadUSB attacks. Does any system do this?
by weinzierl 7mo ago
I think every OS should ask you to press a freshly generated sequence of keys when connecting a keyboard to prevent BadUSB attacks. Does any system do this?
- avidiax 7mo agoThat would break credit card readers, barcode scanners, and special purpose keyboards (like video workstations). I suppose you could rely on a binary code, where the user is instructed to press any two keys to repeat the code, or if there is only one key (or it's a barcode scanner), to enter the same input multiple times, separated by long and short pauses. Still seems like it would be difficult for the average user.
- dylan604 7mo agoHaving those devices ID themselves to the OS as a keyboard sounds like an idea where someone said "it'll be fine" rather than doing something more specific. sure, hindsight is 20/20 and all.
- MBCook 7mo agoThere must be a way to tell them apart in the USB protocol because I’ve never gotten the keyboard prompt on my Mac when I plug one of those in.